5 Perspectives of ISO/IEC 27001 Certification from a Relying Party

One of the most significant features of this highly connected cyber world we all now live in is the degree to which enterprises provide or consume information services from each other. This places increasing onus upon the provider to be able to give assurances to their customers that their systems are secure enough to protect the customers’ data. Equally the customer or consumer of services, who is the relying party for the security implemented by the provider, must find ways and means to gather the assurances they require. ISO27001 is one amongst a number of potential such vehicle to provide this.

 

Main points covered:

• How can a relying party structure their security assurance requirements to allow competing service providers to demonstrate their ISO/IEC 27001 conformance and provide assurance that they can protect the relying party’s data?

• How to assess the ISO/IEC 27001 evidence provided by the service providers in order to be assured that they meet the relying party’s needs?

• How does the size of the service provider or the use of cloud services not matter in being able to provide ISO/IEC 27001 conformance assurance to the relying party?

 

Presenter:

Our presenter for this webinar will be Colin Whittaker, who is a highly experienced Information Security leader with a demonstrable record of managing information security risk and compliance, across government and in the private sector. Throughout his career, he has directly contributed to leading the evolution and thinking of how information and cyber security problem domains are defined and the threats that must be addressed. Currently, Mr. Colin works at the Informed Risk Decisions as a Director and is also a Founder of this company. He has also worked at Visa Europe as the VP for Payment System Risk and at UK Payments as Head of Security. At Visa Europe, he set and managed the payment system security risk appetite, based on the pragmatic use of PCI standards.

 

Organizer: Ardian Berisha

 

Date: May 10, 2017

 

5 Perspectives of ISO/IEC 27001 Certification from a Relying Party from PECB